Static task
static1
Behavioral task
behavioral1
Sample
2725838e2e25806579a677caa870a586.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2725838e2e25806579a677caa870a586.dll
Resource
win10v2004-20240704-en
General
-
Target
2725838e2e25806579a677caa870a586.bin
-
Size
186KB
-
MD5
2725838e2e25806579a677caa870a586
-
SHA1
72ee7477df3f9235f977f6ef160d62e263b3bf7a
-
SHA256
c368fd4c5830644501c68f5930299efc276f7444302b0ccc8de1772bc371f471
-
SHA512
e296a18dd75d65cfd5aff337f5da50a58cab09869d87d46fa2c06c77430f4a7ba39a7a260558db9625446769ab0f989f22e52f79c2b6bc0d35309399035c998b
-
SSDEEP
3072:0xR+XoNvm5Fkl5/yc3cI5Pmgxs+NSqaiFxG1BIvh0MUnc918:0mXoF5N315eg3AqaIG1ihJUc8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2725838e2e25806579a677caa870a586.bin
Files
-
2725838e2e25806579a677caa870a586.bin.dll windows:1 windows x86 arch:x86
f3690d7fd0326c40f92e9b57a25b4d4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
UnmapViewOfFile
VirtualQuery
GetModuleFileNameA
MapViewOfFile
OpenFileMappingA
GetEnvironmentStrings
GetVersion
ExitProcess
GetStartupInfoA
GetFileType
CloseHandle
GetCurrentThreadId
GetCommandLineA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
VirtualFree
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCPInfo
VirtualAlloc
GetACP
GetOEMCP
GetStdHandle
user32
wsprintfA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ